PT-2024-11811 · Linux+3 · Linux Kernel+3

Published 2022-01-18 · Updated 2026-03-14 · CVE-2022-48833

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Linux kernel versions prior to 5.16.0-rc5-btrfs-next-109

Description The vulnerability occurs in the btrfs file system, where space reservations for log tree extent buffers are not properly cleaned up after a transaction abort. This happens when the writeback for a log tree extent buffer fails, causing the EXTENT BUFFER UPTODATE bit to be cleared and the EXTENT BUFFER WRITE ERR bit to be set. As a result, the free log tree() function may return an -EIO error when trying to read a node or leaf, preventing the iteration over the entire tree and the update of reserved space for the extent buffer. This issue can lead to errors when unmounting the file system, including warnings and errors such as "BTRFS: error (device dm-0) in cleanup transaction:1913: errno=-5 IO failure" and "BTRFS: error (device dm-0) in free log tree:3420: errno=-5 IO failure".

Recommendations To resolve this issue, update the Linux kernel to a version newer than 5.16.0-rc5-btrfs-next-109. If an update is not available, consider temporarily disabling the btrfs file system or restricting its use to minimize the risk of exploitation. Additionally, ensure that all file systems are properly unmounted before shutting down the system to prevent data corruption.

Exploit

Fix

Memory Leak

Weakness Enumeration

CWE-401

Related Identifiers

AZL-68246

BDU:2025-14262

CVE-2022-48833

Affected Products

Astra Linux

Debian

Linux Kernel

Red Os

References · 22

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2022/48xxx/CVE-2022-48833.json · Exploit
• https://cve.org/CVERecord?id=CVE-2022-48833 · Security Note
• https://bdu.fstec.ru/vul/2025-14262 · Security Note
• https://git.kernel.org/stable/c/44557a8f539a822c91238c1f95a95f98a5093d82 · Patch
• https://osv.dev/vulnerability/UBUNTU-CVE-2022-48833 · Vendor Advisory
• https://git.kernel.org/stable/c/4c5d94990fa2fd609360ecd0f7e183212a7d115c · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2022-48833 · Security Note
• https://git.kernel.org/stable/c/40cdc509877bacb438213b83c7541c5e24a1d9ec · Patch
• https://osv.dev/vulnerability/ROOT-OS-DEBIAN-11-CVE-2022-48833 · Vendor Advisory
• https://ubuntu.com/security/CVE-2022-48833 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2022-48833 · Vendor Advisory
• https://security-tracker.debian.org/tracker/CVE-2022-48833 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-48833 · Vendor Advisory
• https://osv.dev/vulnerability/AZL-68246 · Vendor Advisory
• https://kernel.org/pub/linux/kernel/v5.x/ChangeLog-5.16.17 · Note